Security your clients can trust.
Your firm holds privileged information and client funds. CaseFuze is built to protect both, and audited to prove it.
Held to a bank's standard, not a startup's.
SOC 2 Type II audited, encrypted end to end, and access-controlled down to the person. Every action in your account is logged and attributable.
- SOC 2 Type II. Independently audited controls.
- Encrypted. In transit and at rest.
- Read-only banking. CaseFuze can never move your money.
Security posture
SecureDefense in depth, not a checkbox.
SOC 2 Type II
Our controls are independently audited to the SOC 2 Type II standard, so you never have to take our word for it.
Encryption everywhere
Data is encrypted in transit with TLS 1.3 and at rest with AES-256, with keys managed and rotated for you.
Read-only bank feeds
Trust and operating accounts connect through Plaid in read-only mode. CaseFuze can see transactions to reconcile them, never move funds.
Role-based access
Give each person exactly the access their job needs. Least-privilege by default, and every access is recorded.
Full audit trail
Every action records who did what and when. Nothing can be deleted without a trace, which is exactly what an auditor wants.
Continuous backups
Point-in-time backups so a mistake, an outage, or a ransomware event never loses your firm data.
99.9% uptime
Your data is replicated in real time across multiple servers, so the platform stays available when you need it and a single failure never takes the firm offline.
Built for how law firms are actually regulated.
HIPAA compliant
Firms that store protected health information can put a Business Associate Agreement in place. We maintain administrative, physical, and technical safeguards for PHI.
ABA guidelines
Aligned with the ABA technology guidelines for law firms, with encrypted communication, access controls, and audit trails that support your duty of technical competence.
Built for IOLTA recordkeeping
Every state bar asks for the same records: a ledger per client, a running balance, and a reconciliation that ties book, bank and client ledgers together. CaseFuze keeps all three and exports the reconciliation in a form an auditor accepts.
Audit log
LiveEvery action, on the record.
CaseFuze logs every action with the user, a timestamp, and before-and-after state. Search the full history by person, matter, date, or type, and export it whenever an auditor asks.
- Attributed. Every entry ties to a named user.
- Tamper-evident. Nothing is deleted without a trace.
- Exportable. Clean, bar-ready reports on demand.
The specifics.
- Encryption
- AES-256 at rest, TLS 1.3 in transit
- Data residency
- United States, end to end
- Multi-factor authentication
- Email confirmation at sign-in
- Bank connections
- Read-only through Plaid — CaseFuze can never move funds
- Access
- Role-based, least privilege, every access logged
- Audit log
- Attributed to a named user, tamper-evident, exportable
- Backups
- Point-in-time, continuous
- Uptime
- 99.9%, replicated in real time
- Built for
- One solo attorney up to a 1,000-plus user multi-state firm, on the same plan
- Included in
- The $49 per user, per month plan — there is no tier above it
- Free access
- Contact us · conditions apply
- Works on
- Any device with a browser. Installs from the browser on iPhone, iPad, Android, Windows and Mac, with no app store
Better together.
Ready to see security & compliance in action?
It’s included in the $49 plan, with every other CaseFuze feature.